Linux · Security advisory · December 22, 2025

ELSA-2025-28068: Security update for 8 packages

ELSA-2025-28068, released December 22, 2025, fixes 1 CVE across 8 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0049
42nd percentile

Fixed package versions

ProductReleaseFixed in
kernel-uekol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-containerol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-container-debugol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-debugol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-debug-develol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-develol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-docol 80:5.4.17-2136.350.3.2.el7uek
kernel-uek-toolsol 80:5.4.17-2136.350.3.2.el7uek

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-40271 linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... 7.8 0.0049 None reported
Showing 1 to 1 of 1 1